CVE-2022-40134
Severity
4.4MEDIUM
EPSS
0.1%
top 84.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 30
Latest updateJan 31
Description
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.8 | Impact: 3.6
Affected Packages326 packages
🔴Vulnerability Details
2GHSA▶
GHSA-p7vc-qcj9-2mj9: An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated↗2023-01-31
CVEList▶
CVE-2022-40134: An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated↗2023-01-30
🕵️Threat Intelligence
1Qualys
▶